Description
In Botan 1.8.0 through 1.11.33, when decoding BER data an integer overflow could occur, which would cause an incorrect length field to be computed. Some API callers may use the returned (incorrect and attacker controlled) length field in a way which later causes memory corruption or other failure.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-786-1 | botan1.10 security update |
EUVD |
EUVD-2016-9949 | In Botan 1.8.0 through 1.11.33, when decoding BER data an integer overflow could occur, which would cause an incorrect length field to be computed. Some API callers may use the returned (incorrect and attacker controlled) length field in a way which later causes memory corruption or other failure. |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-06T02:42:10.498Z
Reserved: 2016-10-31T00:00:00.000Z
Link: CVE-2016-9132
No data.
Status : Modified
Published: 2017-01-30T22:59:00.827
Modified: 2026-05-13T00:24:29.033
Link: CVE-2016-9132
No data.
OpenCVE Enrichment
No data.
Weaknesses
Debian DLA
EUVD